Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/34352e3232352e3235302e302f32332d3332203d3e20323731363738.roa
File: 34352e3232352e3235302e302f32332d3332203d3e20323731363738.roa (raw, json)
Hash identifier: 40EazGvQt3ulXZWC9T7QRKrspf5hs+LdADbBGZfneZ4=
Subject key identifier: 43:35:99:C9:0B:EF:59:88:82:7B:70:1F:CC:7E:4A:94:93:ED:17:06
Certificate issuer: /CN=D251493312F283AB5462B511E5D7075BFB1B2317
Certificate serial: 2797047DAD9CDD8F5E9626F2A8575BF919F15A39
Authority key identifier: D2:51:49:33:12:F2:83:AB:54:62:B5:11:E5:D7:07:5B:FB:1B:23:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D251493312F283AB5462B511E5D7075BFB1B2317.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/34352e3232352e3235302e302f32332d3332203d3e20323731363738.roa
Signing time: Fri 01 Dec 2023 19:08:22 +0000
ROA not before: Fri 01 Dec 2023 19:03:22 +0000
ROA not after: Fri 29 Nov 2024 19:08:22 +0000
asID: 271678
IP address blocks: 45.225.250.0/23 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:97:04:7d:ad:9c:dd:8f:5e:96:26:f2:a8:57:5b:f9:19:f1:5a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D251493312F283AB5462B511E5D7075BFB1B2317
Validity
Not Before: Dec 1 19:03:22 2023 GMT
Not After : Nov 29 19:08:22 2024 GMT
Subject: CN=433599C90BEF5988827B701FCC7E4A9493ED1706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bf:00:08:d0:41:a3:09:af:7e:0b:06:ef:50:
f1:b4:f9:94:f2:86:b2:b9:1e:ab:c9:ae:cb:07:0a:
cb:17:f5:3c:48:61:91:6c:26:31:f1:0f:a6:b4:47:
fc:ff:36:20:8d:58:1e:89:fc:66:38:f4:ee:9a:88:
d1:32:6b:2c:b4:dc:20:60:44:25:f6:39:25:b3:df:
23:58:2e:8e:ab:83:fc:95:03:83:7a:20:3f:11:65:
1b:a2:64:2f:b7:0c:dc:ae:9e:35:fc:b7:5f:37:39:
ae:78:5d:1a:41:ce:50:ac:b0:71:b7:a0:cc:cf:b1:
41:17:8c:f7:f4:b2:ab:71:8e:f9:9e:5f:64:bd:af:
87:b1:a8:1b:c1:f6:42:36:1c:b5:d5:1b:c1:73:7f:
e7:bc:f1:9d:03:c8:39:fa:cb:06:89:72:2a:64:db:
d4:6c:88:52:38:a8:1c:48:e4:55:fd:33:53:42:c0:
2d:e2:d3:4f:4a:ae:c5:ca:98:eb:df:f8:00:bd:c9:
2f:3e:6c:a8:0b:ba:8e:d0:b0:92:2d:e5:d0:9b:62:
b1:9d:1a:ea:1e:a3:79:c2:59:c0:19:33:6d:8d:93:
ec:0e:97:16:d9:71:aa:cf:70:83:13:50:8b:9d:ed:
b9:16:26:14:ee:ce:53:80:54:a2:27:63:b4:61:0c:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:35:99:C9:0B:EF:59:88:82:7B:70:1F:CC:7E:4A:94:93:ED:17:06
X509v3 Authority Key Identifier:
keyid:D2:51:49:33:12:F2:83:AB:54:62:B5:11:E5:D7:07:5B:FB:1B:23:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/D251493312F283AB5462B511E5D7075BFB1B2317.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D251493312F283AB5462B511E5D7075BFB1B2317.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DdHjrGojsejkrD9hQuYRvbx8MoetXM6Cr15axXu1d5a/0/34352e3232352e3235302e302f32332d3332203d3e20323731363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.250.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:d4:41:c5:a5:eb:96:18:e9:e7:53:f6:63:15:79:9a:7c:29:
5b:49:c4:35:e8:ad:51:de:2b:1a:fe:ac:41:fa:68:f5:d6:7f:
a0:38:ec:e2:c5:a6:be:39:88:4e:40:46:a4:df:49:f4:bd:cb:
22:b3:42:ee:a3:fe:0b:75:64:e3:cc:bd:eb:b2:d9:13:db:89:
fc:9f:e3:c2:0f:c5:b8:0f:fe:32:8b:97:c8:6d:9e:4e:06:06:
df:f0:12:3d:43:db:af:6e:16:d1:93:de:17:99:82:f1:ad:ef:
87:f1:6e:a8:62:c4:08:1c:c4:dd:2a:73:cb:7a:34:a7:19:83:
bd:a1:2c:55:d5:6a:be:de:f1:94:25:ef:03:35:ab:52:df:2f:
e5:cb:85:79:4d:a2:7a:b9:4a:60:62:dd:65:14:34:d4:00:6d:
18:ab:5d:9e:9b:f7:8e:86:bf:7f:7d:00:c8:79:d5:b3:d3:72:
66:d7:13:b6:1b:a9:51:6c:22:19:4a:fe:97:cc:3c:0c:d7:ae:
5f:e6:c0:3f:9b:53:5d:26:a8:38:0e:03:ba:5b:75:c3:4b:ad:
01:8a:70:86:42:48:82:ab:c3:eb:7e:e2:30:9c:95:9d:31:4c:
bf:f6:7f:38:67:17:27:af:75:32:61:43:9e:ec:19:a3:a1:21:
99:9b:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 22:39:14 2023 by rpki-client on console-fra.rpki-client.org